Your phisher's codename is:

Placeholder image
😯

Surprised Carp

Illustration by Lars Meiertoberens from the Noun Project